clickhouse-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill uses a placeholder password ('dev_password') for a local Docker container environment. It explicitly instructs users to use
.env.localfor real credentials and provides a.env.examplefile, which aligns with security best practices for local development environments. - [DATA_EXFILTRATION]: All network operations (curl, http client) are directed at 'localhost', ensuring that data remains within the local development environment.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known resources including the official ClickHouse Docker image and reputable Node.js packages (@clickhouse/client, vitest).
Audit Metadata